parenta.vir
filenamea.unpacked.vir
size8963072 (0x88c400)
md5b5dd26361c0a61ae5a8f1f087d9cc175
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x50
blocks_in_file2
num_relocs0
header_paragraphs4
min_extra_paragraphs0xf
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0x1a
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

SignaturePE
Machine0x14c
NumberOfSections0xa
TimeDateStamp0x532864ca
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x818f
Magic0x10b
LinkerVersion2.25
SizeOfCode0xfc800
SizeOfInitializedData0x78f800
SizeOfUninitializedData0
AddressOfEntryPoint0xfdfd4
BaseOfCode0x1000
BaseOfData0xff000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion0.0
SubsystemVersion4.0
Reserved10
SizeOfImage0x89b000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x4000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

Borland Delphi v6.0 - v7.0

Sections

namevavsizeraw sizeflags
.text0x10000xfb4f80xfb600R-X CODE
.itext0xfd0000x10cc0x1200R-X CODE
.data0xff0000x7c200x7e00RW- IDATA
.bss0x1070000x7d440RW-
.idata0x10f0000x34700x3600RW- IDATA
.edata0x1130000xa30x200R-- IDATA
.tls0x1140000x380RW-
.rdata0x1150000x180x200R-- IDATA
.reloc0x1160000xfd0c0xfe00R-- IDATA DISCARDABLE
.rsrc0x1260000x7742000x774200R-- IDATA

Data Directory

typevasize
EXPORT0x1130000xa3
IMPORT0x10f0000x3470
RESOURCE0x1260000x774200
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x1150000x18
LOAD_CONFIG00
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x5140000x5140380x4ff7980x51501000
typenamesizecp
CURSOR#13080
CURSOR#23080
CURSOR#33080
CURSOR#43080
CURSOR#53080
CURSOR#63080
CURSOR#73080
BITMAPBBABORT4640
BITMAPBBALL4840
BITMAPBBCANCEL4640
BITMAPBBCLOSE4640
BITMAPBBHELP4640
BITMAPBBIGNORE4640
BITMAPBBNO4640
BITMAPBBOK4640
BITMAPBBRETRY4640
BITMAPBBYES4640
BITMAPPREVIEWGLYPH2320
ICON#1169360
ICON#242640
ICON#324400
ICON#411280
DIALOGDLGTEMPLATE820
DIALOGTEXTFILEDLG820
STRING#406813520
STRING#406921640
STRING#40708560
STRING#407110840
STRING#40725640
STRING#407311160
STRING#40749480
STRING#40758000
STRING#40768280
STRING#407711560
STRING#40788800
STRING#40799120
STRING#40806360
STRING#408113480
STRING#40829520
STRING#40832160
STRING#40842160
STRING#40855520
STRING#40868320
STRING#40879840
STRING#40889080
STRING#40898960
STRING#409010160
STRING#40912800
STRING#40922040
STRING#40935200
STRING#40949200
STRING#40958760
STRING#40966760
RCDATADVCLAL160
RCDATAPACKAGEINFO20040
RCDATATFBBLIE4438520
RCDATATFCEF12822090
RCDATATFITAJLIE8350580
RCDATATFITALIE11842490
RCDATATFITAUNILIE12703820
RCDATATFSNTJLIE7970120
RCDATATFSNTLIE6704300
RCDATATFSOBRE7250
RCDATATFUPITAP12665200
RCDATAT_16960
GROUP_CURSOR#32761200
GROUP_CURSOR#32762200
GROUP_CURSOR#32763200
GROUP_CURSOR#32764200
GROUP_CURSOR#32765200
GROUP_CURSOR#32766200
GROUP_CURSOR#32767200
GROUP_ICONCHROME620
MANIFEST#14080
idlangstring
650720This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
650730This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
650740The chunks must be compatible to be assigned.
650750This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
650760This "Portable Network Graphics" image contains no data.
650770Some operation could not be performed because the system is out of resources. Close some windows and try again.
650780This operation is not valid because the current image contains no valid header.
650790The new size provided for image resizing is invalid.
650880Loading
650890Saving
650900Converting
650910Rendering
650920Copying
650930Optimizing
650940This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
650950The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
650960This "Portable Network Graphics" image is invalid because it has missing image parts.
650970Could not decompress the image because it contains invalid compressed data. Description:
650980The "Portable Network Graphics" image contains an invalid palette.
650990The file being readed is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corruped, try obtaining it again.
651000This "Portable Network Graphics" image is not supported or it might be invalid. (IHDR chunk is not the first)
651010This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
651020There is no such palette entry.
651030This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
651040Object type not supported for operation
651050Invalid GIF data
651060Invalid image size
651070Image exceeds Logical Screen size
651080No global or local color table defined
651090Invalid pixel coordinates
651100Unsupported PixelFormat
651110Invalid image dimensions
651120Image has no DIB
651130Invalid stream operation
651140Color not in color table
651150Color table is empty
651160Image is empty
651170Frame contains multiple Graphic Control Extension blocks
651180Missing, invalid or empty palette
651190GIF Image
651200Color table overflow
651210Invalid color index
651220Invalid color index - color map expanded
651230Cannot save empty GIF
651240Invalid GIF signature
651250Invalid number of colors specified in Screen Descriptor
651260Invalid number of colors specified in Image Descriptor
651270Unknown extension type
651280Invalid extension introducer
651290Failed to allocate memory for GIF DIB
651300Decoder bit buffer under-run
651310Circular decoder table entry
651320Invalid Image trailer
651330Internal error: Extension Instance does not match Extension Label
651340Unsupported Application Extension block size
651350Unknown GIF block type
651360Unsupported PixelFormat
651370Invalid image dimensions
651380Image has no DIB
651390Invalid stream operation
651400Color not in color table
651410Color table is empty
651420Image is empty
651430Invalid reduction method
651440GIF Image
651450Loading...
651460Saving...
651470Converting...
651480Rendering...
651490Copying...
651500Optimizing...
651510Premature end of data
651520Invalid extension introducer
651530Failed to allocate memory for GIF DIB
651540Decoder bit buffer under-run
651550Circular decoder table entry
651560Invalid Image trailer
651570Internal error: Extension Instance does not match Extension Label
651580Unsupported Application Extension block size
651590Unknown GIF block type
651600Object type not supported for operation
651610Invalid GIF data
651620Image height too small for contained frames
651630Image width too small for contained frames
651640Failed to store GIF on clipboard
651650Image exceeds Logical Screen size
651660No global or local color table defined
651670Invalid pixel coordinates
651680Request method requires HTTP version 1.1
651690This authentication method is already registered with class name %s.
651700Protocol field is empty
651710Host field is empty
651720Error
651730Cannot change the size of a JPEG image
651740JPEG error #%d
651750JPEG Image File
651760Premature end of data
651770Color table overflow
651780Invalid color index
651790Unsupported GIF version
651800Invalid GIF signature
651810Invalid number of colors specified in Screen Descriptor
651820Invalid number of colors specified in Image Descriptor
651830Unknown extension type
651840Object type not supported.
651850No data to read.
651860Read Timeout
651870Max line length exceeded.
651880Connect timed out.
651890Already connected.
651900Maximum number of line allowed exceeded
651910Transparent proxy cannot bind.
651920UDP Not supported by this proxy.
651930Buffer terminator must be specified.
651940Buffer start position is invalid.
651950Reply Code is not valid: %s
651960IOHandler value is not valid
651970Chunk Started
651980Not Acceptable
651990Unknown Protocol
652000Socks server did not respond.
652010Invalid socks authentication method.
652020Authentication error to socks server.
652030General SOCKS server failure.
652040Connection not allowed by ruleset.
652050Network unreachable.
652060Host unreachable.
652070Connection refused.
652080TTL expired.
652090Command not supported.
652100Address type not supported.
652110%d: Circular links are not allowed
652120Not enough data in buffer.
652130Too much data in buffer.
652140File "%s" not found
652150Not Connected
652160Can not bind in port range (%d - %d)
652170Connection Closed Gracefully.
652180Could not bind socket. Address and port are already in use.
652190Invalid Port Range (%d - %d)
652200%s is not a valid service.
652210IPv6 unavailable
652220%s is not a valid IPv6 address
652230The requested IPVersion / Address family is not supported.
652240Not all bytes sent.
652250Package Size Too Big.
652260Set Size Exceeded.
652270UDP is not support in this SOCKS version.
652280Request rejected or failed.
652290Request rejected because SOCKS server cannot connect.
652300Request rejected because the client program and identd report different user-ids.
652310Unknown socks error.
652320Socket is already connected.
652330Socket is not connected.
652340Cannot send or receive after socket is closed.
652350Too many references, cannot splice.
652360Connection timed out.
652370Connection refused.
652380Too many levels of symbolic links.
652390File name too long.
652400Host is down.
652410No route to host.
652420Directory not empty
652430Host not found.
652440Stack Class is undefined.
652450Stack already created.
652460Only one TIdAntiFreeze can exist per application.
652470Cannot change IPVersion when connected
652480Message too long.
652490Protocol wrong type for socket.
652500Bad protocol option.
652510Protocol not supported.
652520Socket type not supported.
652530Operation not supported on socket.
652540Protocol family not supported.
652550Address family not supported by protocol family.
652560Address already in use.
652570Cannot assign requested address.
652580Network is down.
652590Network is unreachable.
652600Net dropped connection or reset.
652610Software caused connection abort.
652620Connection reset by peer.
652630No buffer space available.
652640Connected.
652650Disconnecting.
652660Disconnected.
652670%s
652680Socket Error # %d %s
652690Interrupted system call.
652700Bad file number.
652710Access denied.
652720Buffer fault.
652730Invalid argument.
652740Too many open files.
652750Operation would block.
652760Operation now in progress.
652770Operation already in progress.
652780Socket operation on non-socket.
652790Destination address required.
652800Big Endian Unicode
652810UTF-8
652820UTF-7
652830OLE error %.8x
652840Method '%s' not supported by automation object
652850Variant does not reference an automation object
652860Dispatch methods do not support more than 64 parameters
652870COM Server Warning
652880There are still active COM objects in this application. One or more clients may have references to these objects, so manually closing
652890this application may cause those client application(s) to fail. Are you sure you want to close this application?
652900Failed attempting to retrieve time zone information.
652910Error on call Winsock2 library function %s
652920Error on loading Winsock2 library (%s)
652930Winsock Initialization Error.
652940Resolving hostname %s.
652950Connecting to %s.
652960Unable to insert a line
652970Invalid clipboard format
652980Clipboard does not support Icons
652990Cannot open clipboard
653000Text exceeds memo capacity
653010Menu '%s' is already being used by another form
653020Docked control must have a name
653030Error removing control from dock tree
653040 - Dock zone not found
653050 - Dock zone has no control
653060Error loading dock zone from the stream. Expecting version %d, but found %d.
653070Error setting %s.Count
653080Listbox (%s) style must be virtual in order to set Count
653090ANSI
653100ASCII
653110Unicode
653120Enter
653130Space
653140PgUp
653150PgDn
653160End
653170Home
653180Left
653190Up
653200Right
653210Down
653220Ins
653230Del
653240Shift+
653250Ctrl+
653260Alt+
653270Value must be between %d and %d
653280Information
653290Confirm
653300&Yes
653310&No
653320OK
653330Cancel
653340&Help
653350&Abort
653360&Retry
653370&Ignore
653380&All
653390N&o to All
653400Yes to &All
653410BkSp
653420Tab
653430Esc
653440&Close
653450&Ignore
653460&Retry
653470Abort
653480&All
653490Cannot drag a form
653500An error returned from DDE ($0%x)
653510DDE Error - conversation not established ($0%x)
653520Error occurred when DDE ran out of memory ($0%x)
653530Unable to connect DDE conversation
653540Metafiles
653550Enhanced Metafiles
653560Icons
653570Bitmaps
653580Warning
653590Error
653600Cannot hide an MDI Child Form
653610Cannot change Visible in OnShow or OnHide
653620Cannot make a visible window modal
653630%s property out of range
653640Menu index out of range
653650Menu inserted twice
653660Sub-menu is not in menu
653670Not enough timers available
653680GroupIndex cannot be less than a previous menu item's GroupIndex
653690Cannot create form. No MDI forms are currently active
653700A control cannot have itself as its parent
653710OK
653720Cancel
653730&Yes
653740&No
653750&Help
653760Invalid pixel format
653770Scan line index out of range
653780Cannot change the size of an icon
653790Unsupported clipboard format
653800Out of system resources
653810Canvas does not allow drawing
653820Invalid image size
653830Invalid ImageList
653840Invalid ImageList Index
653850Failed to read ImageList data from stream
653860Failed to write ImageList data to stream
653870Error creating window device context
653880Error creating window class
653890Cannot focus a disabled or invisible window
653900Control '%s' has no parent window
653910Parent given is not a parent of '%s'
653920Thread creation error: %s
653930Thread Error: %s (%d)
653940Windows socket error: %s (%d), on API '%s'
653950Asynchronous socket error %d
653960No address specified
653970Can't create new socket
653980Socket already open
653990Can't change value while socket is active
654000Unable to find a Table of Contents
654010No help found for %s
654020No context-sensitive help installed
654030No help found for context
654040No topic-based help system installed
654050Bitmap image is not valid
654060Icon image is not valid
654070Metafile is not valid
654080List capacity out of bounds (%d)
654090List count out of bounds (%d)
654100List index out of bounds (%d)
654110Out of memory while expanding memory stream
654120Error reading %s%s%s: %s
654130Stream read error
654140Property is read-only
654150Failed to create key %s
654160Failed to get data for '%s'
654170Failed to set data for '%s'
654180Resource %s not found
654190%s.Seek not implemented
654200Operation not allowed on sorted list
654210%s not in a class registration group
654220Property %s does not exist
654230Stream write error
654240Bits index out of range
654250Can't write to a read-only resource stream
654260CheckSynchronize called from thread $%x, which is NOT the main thread
654270Class %s not found
654280A class named %s already exists
654290List does not allow duplicates ($0%x)
654300A component named %s already exists
654310String list does not allow duplicates
654320Cannot create file "%s". %s
654330Cannot open file "%s". %s
654340Invalid stream format
654350''%s'' is not a valid component name
654360Invalid property value
654370Invalid property path
654380Invalid property value
654390Invalid data type for '%s'
654400Sun
654410Mon
654420Tue
654430Wed
654440Thu
654450Fri
654460Sat
654470Sunday
654480Monday
654490Tuesday
654500Wednesday
654510Thursday
654520Friday
654530Saturday
654540Ancestor for '%s' not found
654550Cannot assign a %s to a %s
654560Sep
654570Oct
654580Nov
654590Dec
654600January
654610February
654620March
654630April
654640May
654650June
654660July
654670August
654680September
654690October
654700November
654710December
654720Assertion failed
654730Interface not supported
654740Exception in safecall method
654750%s (%s, line %d)
654760Abstract Error
654770Access violation at address %p in module '%s'. %s of address %p
654780System Error. Code: %d. %s
654790A call to an OS function failed
654800Jan
654810Feb
654820Mar
654830Apr
654840May
654850Jun
654860Jul
654870Aug
654880Read
654890Write
654900Error creating variant or safe array
654910Variant or safe array index out of bounds
654920Variant or safe array is locked
654930Invalid variant type conversion
654940Invalid variant operation
654950Invalid variant operation (%s%.8x) %s
654960Could not convert variant of type (%s) into type (%s)
654970Overflow while converting variant of type (%s) into type (%s)
654980Variant overflow
654990Invalid argument
655000Invalid variant type
655010Operation not supported
655020Unexpected variant error
655030External exception %x
655040Floating point division by zero
655050Floating point overflow
655060Floating point underflow
655070Invalid pointer operation
655080Invalid class typecast
655090Access violation at address %p. %s of address %p
655100Access violation
655110Stack overflow
655120Control-C hit
655130Privileged instruction
655140Operation aborted
655150Exception %s in module %s at %p. %s%s
655160Application Error
655170Format '%s' invalid or incompatible with argument
655180No argument for format '%s'
655190Variant method calls not supported
655200'%s' is not a valid integer value
655210Invalid argument to time encode
655220Invalid argument to date encode
655230Out of memory
655240I/O error %d
655250File not found
655260Invalid filename
655270Too many open files
655280File access denied
655290Read beyond end of file
655300Disk full
655310Invalid numeric input
655320Division by zero
655330Range check error
655340Integer overflow
655350Invalid floating point operation
module_namehintordfunction_name
KERNEL32.DLLTlsSetValue
KERNEL32.DLLTlsGetValue
KERNEL32.DLLLocalAlloc
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLlstrcpyA
KERNEL32.DLLWriteFile
KERNEL32.DLLWinExec
KERNEL32.DLLWaitForSingleObject
KERNEL32.DLLVirtualQuery
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLTerminateProcess
KERNEL32.DLLSleep
KERNEL32.DLLSizeofResource
KERNEL32.DLLSetThreadPriority
KERNEL32.DLLSetThreadLocale
KERNEL32.DLLSetFilePointer
KERNEL32.DLLSetEvent
KERNEL32.DLLSetErrorMode
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLResumeThread
KERNEL32.DLLResetEvent
KERNEL32.DLLRemoveDirectoryA
KERNEL32.DLLReadFile
KERNEL32.DLLRaiseException
KERNEL32.DLLQueryPerformanceFrequency
KERNEL32.DLLQueryPerformanceCounter
KERNEL32.DLLOpenProcess
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLMulDiv
KERNEL32.DLLLockResource
KERNEL32.DLLLoadResource
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLLeaveCriticalSection
KERNEL32.DLLInitializeCriticalSection
KERNEL32.DLLGlobalUnlock
KERNEL32.DLLGlobalSize
KERNEL32.DLLGlobalHandle
KERNEL32.DLLGlobalLock
KERNEL32.DLLGlobalFree
KERNEL32.DLLGlobalFindAtomA
KERNEL32.DLLGlobalDeleteAtom
KERNEL32.DLLGlobalAlloc
KERNEL32.DLLGlobalAddAtomA
KERNEL32.DLLGetVersionExA
KERNEL32.DLLGetVersion
KERNEL32.DLLGetTimeZoneInformation
KERNEL32.DLLGetTickCount
KERNEL32.DLLGetThreadLocale
KERNEL32.DLLGetTempPathA
KERNEL32.DLLGetSystemInfo
KERNEL32.DLLGetStdHandle
KERNEL32.DLLGetProcAddress
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetLocaleInfoA
KERNEL32.DLLGetLocalTime
KERNEL32.DLLGetLastError
KERNEL32.DLLGetFullPathNameA
KERNEL32.DLLGetFileSize
KERNEL32.DLLGetFileAttributesA
KERNEL32.DLLGetExitCodeThread
KERNEL32.DLLGetEnvironmentVariableA
KERNEL32.DLLGetDiskFreeSpaceA
KERNEL32.DLLGetDateFormatA
KERNEL32.DLLGetCurrentThreadId
KERNEL32.DLLGetCurrentProcessId
KERNEL32.DLLGetCurrentProcess
KERNEL32.DLLGetComputerNameA
KERNEL32.DLLGetCPInfo
KERNEL32.DLLFreeResource
KERNEL32.DLLInterlockedIncrement
KERNEL32.DLLInterlockedExchange
KERNEL32.DLLInterlockedDecrement
KERNEL32.DLLFreeLibrary
KERNEL32.DLLFormatMessageA
KERNEL32.DLLFindResourceA
KERNEL32.DLLFindNextFileA
KERNEL32.DLLFindFirstFileA
KERNEL32.DLLFindClose
KERNEL32.DLLFileTimeToLocalFileTime
KERNEL32.DLLFileTimeToDosDateTime
KERNEL32.DLLEnumCalendarInfoA
KERNEL32.DLLEnterCriticalSection
KERNEL32.DLLDeleteFileA
KERNEL32.DLLDeleteCriticalSection
KERNEL32.DLLCreateThread
KERNEL32.DLLCreateFileA
KERNEL32.DLLCreateEventA
KERNEL32.DLLCopyFileA
KERNEL32.DLLCompareStringA
KERNEL32.DLLCloseHandle
KERNEL32.DLLGetACP
KERNEL32.DLLSleep
KERNEL32.DLLVirtualFree
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLGetTickCount
KERNEL32.DLLQueryPerformanceCounter
KERNEL32.DLLGetCurrentThreadId
KERNEL32.DLLInterlockedDecrement
KERNEL32.DLLInterlockedIncrement
KERNEL32.DLLVirtualQuery
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLlstrlenA
KERNEL32.DLLlstrcpynA
KERNEL32.DLLLoadLibraryExA
KERNEL32.DLLGetThreadLocale
KERNEL32.DLLGetStartupInfoA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetLocaleInfoA
KERNEL32.DLLGetCommandLineA
KERNEL32.DLLFreeLibrary
KERNEL32.DLLFindFirstFileA
KERNEL32.DLLFindClose
KERNEL32.DLLExitProcess
KERNEL32.DLLExitThread
KERNEL32.DLLCreateThread
KERNEL32.DLLCompareStringA
KERNEL32.DLLWriteFile
KERNEL32.DLLUnhandledExceptionFilter
KERNEL32.DLLRtlUnwind
KERNEL32.DLLRaiseException
KERNEL32.DLLGetStdHandle
KERNEL32.DLLSleep
advapi32.dllRegSetValueExA
advapi32.dllRegQueryValueExA
advapi32.dllRegOpenKeyExA
advapi32.dllRegFlushKey
advapi32.dllRegCreateKeyExA
advapi32.dllRegCloseKey
advapi32.dllGetUserNameA
advapi32.dllRegQueryValueExA
advapi32.dllRegOpenKeyExA
advapi32.dllRegCloseKey
comctl32.dll_TrackMouseEvent
comctl32.dllImageList_SetIconSize
comctl32.dllImageList_GetIconSize
comctl32.dllImageList_Write
comctl32.dllImageList_Read
comctl32.dllImageList_DragShowNolock
comctl32.dllImageList_DragMove
comctl32.dllImageList_DragLeave
comctl32.dllImageList_DragEnter
comctl32.dllImageList_EndDrag
comctl32.dllImageList_BeginDrag
comctl32.dllImageList_Remove
comctl32.dllImageList_DrawEx
comctl32.dllImageList_Draw
comctl32.dllImageList_GetBkColor
comctl32.dllImageList_SetBkColor
comctl32.dllImageList_Add
comctl32.dllImageList_SetImageCount
comctl32.dllImageList_GetImageCount
comctl32.dllImageList_Destroy
comctl32.dllImageList_Create
comctl32.dllInitCommonControls
gdi32.dllUnrealizeObject
gdi32.dllStretchDIBits
gdi32.dllStretchBlt
gdi32.dllSetWindowOrgEx
gdi32.dllSetWinMetaFileBits
gdi32.dllSetViewportOrgEx
gdi32.dllSetTextColor
gdi32.dllSetStretchBltMode
gdi32.dllSetROP2
gdi32.dllSetPixel
gdi32.dllSetPaletteEntries
gdi32.dllSetEnhMetaFileBits
gdi32.dllSetDIBColorTable
gdi32.dllSetBrushOrgEx
gdi32.dllSetBkMode
gdi32.dllSetBkColor
gdi32.dllSelectPalette
gdi32.dllSelectObject
gdi32.dllSelectClipRgn
gdi32.dllSaveDC
gdi32.dllRestoreDC
gdi32.dllResizePalette
gdi32.dllRectangle
gdi32.dllRectVisible
gdi32.dllRealizePalette
gdi32.dllPolyline
gdi32.dllPlayEnhMetaFile
gdi32.dllPatBlt
gdi32.dllMoveToEx
gdi32.dllMaskBlt
gdi32.dllLineTo
gdi32.dllIntersectClipRect
gdi32.dllGetWindowOrgEx
gdi32.dllGetWinMetaFileBits
gdi32.dllGetTextMetricsA
gdi32.dllGetTextExtentPoint32A
gdi32.dllGetSystemPaletteEntries
gdi32.dllGetStockObject
gdi32.dllGetRgnBox
gdi32.dllGetPixel
gdi32.dllGetPaletteEntries
gdi32.dllGetObjectType
gdi32.dllGetObjectA
gdi32.dllGetNearestPaletteIndex
gdi32.dllGetEnhMetaFilePaletteEntries
gdi32.dllGetEnhMetaFileHeader
gdi32.dllGetEnhMetaFileBits
gdi32.dllGetDeviceCaps
gdi32.dllGetDIBits
gdi32.dllGetDIBColorTable
gdi32.dllGetDCOrgEx
gdi32.dllGetCurrentPositionEx
gdi32.dllGetClipBox
gdi32.dllGetBrushOrgEx
gdi32.dllGetBitmapBits
gdi32.dllGdiFlush
gdi32.dllExcludeClipRect
gdi32.dllDeleteObject
gdi32.dllDeleteEnhMetaFile
gdi32.dllDeleteDC
gdi32.dllCreateSolidBrush
gdi32.dllCreatePenIndirect
gdi32.dllCreatePalette
gdi32.dllCreateHalftonePalette
gdi32.dllCreateFontIndirectA
gdi32.dllCreateDIBitmap
gdi32.dllCreateDIBSection
gdi32.dllCreateCompatibleDC
gdi32.dllCreateCompatibleBitmap
gdi32.dllCreateBrushIndirect
gdi32.dllCreateBitmap
gdi32.dllCopyEnhMetaFileA
gdi32.dllBitBlt
ole32.dllOleSaveToStream
ole32.dllOleLoadFromStream
ole32.dllGetRunningObjectTable
ole32.dllCreateItemMoniker
ole32.dllCoTaskMemFree
ole32.dllCoTaskMemAlloc
ole32.dllCLSIDFromString
ole32.dllCoCreateInstance
ole32.dllCoRegisterClassObject
ole32.dllCoUninitialize
ole32.dllCoInitialize
ole32.dllIsEqualGUID
ole32.dllIsEqualGUID
oleaut32.dllSafeArrayPtrOfIndex
oleaut32.dllSafeArrayGetUBound
oleaut32.dllSafeArrayGetLBound
oleaut32.dllSafeArrayCreate
oleaut32.dllVariantChangeType
oleaut32.dllVariantCopy
oleaut32.dllVariantClear
oleaut32.dllVariantInit
oleaut32.dllGetErrorInfo
oleaut32.dllRegisterTypeLib
oleaut32.dllLoadTypeLibEx
oleaut32.dllSysFreeString
oleaut32.dllSysFreeString
oleaut32.dllSysReAllocStringLen
oleaut32.dllSysAllocStringLen
quartz.dllAMGetErrorTextA
shell32.dllShellExecuteA
user32.dllCreateWindowExA
user32.dllmouse_event
user32.dllkeybd_event
user32.dllWindowFromPoint
user32.dllWaitMessage
user32.dllUpdateWindow
user32.dllUnregisterClassA
user32.dllUnhookWindowsHookEx
user32.dllTranslateMessage
user32.dllTranslateMDISysAccel
user32.dllTrackPopupMenu
user32.dllSystemParametersInfoA
user32.dllShowWindow
user32.dllShowScrollBar
user32.dllShowOwnedPopups
user32.dllSetWindowsHookExA
user32.dllSetWindowTextA
user32.dllSetWindowPos
user32.dllSetWindowPlacement
user32.dllSetWindowLongW
user32.dllSetWindowLongA
user32.dllSetTimer
user32.dllSetScrollRange
user32.dllSetScrollPos
user32.dllSetScrollInfo
user32.dllSetRect
user32.dllSetPropA
user32.dllSetParent
user32.dllSetMenuItemInfoA
user32.dllSetMenu
user32.dllSetForegroundWindow
user32.dllSetFocus
user32.dllSetCursorPos
user32.dllSetCursor
user32.dllSetClipboardData
user32.dllSetClassLongA
user32.dllSetCapture
user32.dllSetActiveWindow
user32.dllSendMessageTimeoutA
user32.dllSendMessageW
user32.dllSendMessageA
user32.dllScrollWindow
user32.dllScreenToClient
user32.dllRemovePropA
user32.dllRemoveMenu
user32.dllReleaseDC
user32.dllReleaseCapture
user32.dllRegisterWindowMessageA
user32.dllRegisterClipboardFormatA
user32.dllRegisterClassA
user32.dllRedrawWindow
user32.dllPtInRect
user32.dllPostThreadMessageA
user32.dllPostQuitMessage
user32.dllPostMessageA
user32.dllPeekMessageW
user32.dllPeekMessageA
user32.dllOpenClipboard
user32.dllOffsetRect
user32.dllOemToCharA
user32.dllMsgWaitForMultipleObjects
user32.dllMessageBoxA
user32.dllMessageBeep
user32.dllMapWindowPoints
user32.dllMapVirtualKeyA
user32.dllLoadStringA
user32.dllLoadKeyboardLayoutA
user32.dllLoadIconA
user32.dllLoadCursorA
user32.dllLoadBitmapA
user32.dllKillTimer
user32.dllIsZoomed
user32.dllIsWindowVisible
user32.dllIsWindowUnicode
user32.dllIsWindowEnabled
user32.dllIsWindow
user32.dllIsRectEmpty
user32.dllIsIconic
user32.dllIsDialogMessageW
user32.dllIsDialogMessageA
user32.dllIsClipboardFormatAvailable
user32.dllIsChild
user32.dllInvalidateRect
user32.dllIntersectRect
user32.dllInsertMenuItemA
user32.dllInsertMenuA
user32.dllInflateRect
user32.dllGetWindowThreadProcessId
user32.dllGetWindowTextA
user32.dllGetWindowRect
user32.dllGetWindowPlacement
user32.dllGetWindowLongW
user32.dllGetWindowLongA
user32.dllGetWindowDC
user32.dllGetTopWindow
user32.dllGetSystemMetrics
user32.dllGetSystemMenu
user32.dllGetSysColorBrush
user32.dllGetSysColor
user32.dllGetSubMenu
user32.dllGetScrollRange
user32.dllGetScrollPos
user32.dllGetScrollInfo
user32.dllGetPropA
user32.dllGetParent
user32.dllGetWindow
user32.dllGetMessagePos
user32.dllGetMenuStringA
user32.dllGetMenuState
user32.dllGetMenuItemInfoA
user32.dllGetMenuItemID
user32.dllGetMenuItemCount
user32.dllGetMenu
user32.dllGetLastActivePopup
user32.dllGetKeyboardState
user32.dllGetKeyboardLayoutNameA
user32.dllGetKeyboardLayoutList
user32.dllGetKeyboardLayout
user32.dllGetKeyState
user32.dllGetKeyNameTextA
user32.dllGetIconInfo
user32.dllGetForegroundWindow
user32.dllGetFocus
user32.dllGetDoubleClickTime
user32.dllGetDesktopWindow
user32.dllGetDCEx
user32.dllGetDC
user32.dllGetCursorPos
user32.dllGetCursor
user32.dllGetClipboardData
user32.dllGetClientRect
user32.dllGetClassLongA
user32.dllGetClassInfoA
user32.dllGetCapture
user32.dllGetActiveWindow
user32.dllFrameRect
user32.dllFindWindowExA
user32.dllFindWindowA
user32.dllFillRect
user32.dllExitWindowsEx
user32.dllEqualRect
user32.dllEnumWindows
user32.dllEnumThreadWindows
user32.dllEnumClipboardFormats
user32.dllEnumChildWindows
user32.dllEndPaint
user32.dllEnableWindow
user32.dllEnableScrollBar
user32.dllEnableMenuItem
user32.dllEmptyClipboard
user32.dllDrawTextA
user32.dllDrawMenuBar
user32.dllDrawIconEx
user32.dllDrawIcon
user32.dllDrawFrameControl
user32.dllDrawFocusRect
user32.dllDrawEdge
user32.dllDispatchMessageW
user32.dllDispatchMessageA
user32.dllDestroyWindow
user32.dllDestroyMenu
user32.dllDestroyIcon
user32.dllDestroyCursor
user32.dllDeleteMenu
user32.dllDefWindowProcA
user32.dllDefMDIChildProcA
user32.dllDefFrameProcA
user32.dllCreatePopupMenu
user32.dllCreateMenu
user32.dllCreateIcon
user32.dllCopyImage
user32.dllCopyIcon
user32.dllCloseClipboard
user32.dllClientToScreen
user32.dllCheckMenuItem
user32.dllCallWindowProcA
user32.dllCallNextHookEx
user32.dllBringWindowToTop
user32.dllBeginPaint
user32.dllAttachThreadInput
user32.dllCharNextA
user32.dllCharLowerBuffA
user32.dllCharLowerA
user32.dllCharUpperBuffA
user32.dllCharToOemA
user32.dllAdjustWindowRectEx
user32.dllActivateKeyboardLayout
user32.dllGetKeyboardType
user32.dllDestroyWindow
user32.dllLoadStringA
user32.dllMessageBoxA
user32.dllCharNextA
user32.dllDdeCmpStringHandles
user32.dllDdeFreeStringHandle
user32.dllDdeQueryStringA
user32.dllDdeCreateStringHandleA
user32.dllDdeGetLastError
user32.dllDdeFreeDataHandle
user32.dllDdeUnaccessData
user32.dllDdeAccessData
user32.dllDdeCreateDataHandle
user32.dllDdeClientTransaction
user32.dllDdeNameService
user32.dllDdePostAdvise
user32.dllDdeSetUserHandle
user32.dllDdeQueryConvInfo
user32.dllDdeDisconnect
user32.dllDdeConnect
user32.dllDdeUninitialize
user32.dllDdeInitializeA
version.dllVerQueryValueA
version.dllGetFileVersionInfoSizeA
version.dllGetFileVersionInfoA
winmm.dlltimeGetTime
wsock32.dllWSACleanup
wsock32.dllWSAStartup
wsock32.dllWSAGetLastError
wsock32.dllWSACancelAsyncRequest
wsock32.dllWSAAsyncGetServByName
wsock32.dllWSAAsyncGetHostByName
wsock32.dllWSAAsyncSelect
wsock32.dllgethostname
wsock32.dllgetservbyname
wsock32.dllgethostbyname
wsock32.dllsocket
wsock32.dllsend
wsock32.dllrecv
wsock32.dllntohs
wsock32.dlllisten
wsock32.dllioctlsocket
wsock32.dllinet_ntoa
wsock32.dllinet_addr
wsock32.dllhtons
wsock32.dllconnect
wsock32.dllclosesocket
wsock32.dllbind
ordentry_vafunction_name
10x6be20DllUnregisterServer
20x6bddcDllRegisterServer
30x6bdb4DllCanUnloadNow
40x6bd6cDllGetClassObject
module_nameAnarch.exe
flags0
timestamp0
version0.0
ordinal_base1
nFunctions4
nNames4
Names(4)0x113038
Functions(4)0x113028
NameOrdinals(4)0x113048
offsetsizetypecomment
15c115HTM#
127a2f130643PNG(657 x 374)#
147bb9124062PNG(657 x 374)#
1660ec629GIF(100 x 30)#
16b832142913PNG(657 x 374)#
18e6c9629GIF(100 x 30)#
193f92162135PNG(655 x 374)#
1bbc7556743PNG(146 x 37)#
1c9c79143072PNG(655 x 374)#
1ecbc449871PNG(81 x 36)#
1f8f7a124784PNG(655 x 374)#
21774647529PNG(214 x 108)#
223154314270GIF(104 x 104)#
26fd5847529PNG(214 x 108)#
27b75d47529PNG(214 x 108)#
28716347529PNG(214 x 108)#
292b7347529PNG(214 x 108)#
29e57947529PNG(214 x 108)#
2a9f7f47529PNG(214 x 108)#
2b598447529PNG(214 x 108)#
2c138947529PNG(214 x 108)#
2cd0c8183258PNG(655 x 375)#
2f9d0c52391PNG(73 x 18)#
306c3d115768PNG(655 x 375)#
3230cb3202GIF(16 x 16)#
323e58190373PNG(655 x 375)#
35265e52391PNG(73 x 18)#
35f5be182424PNG(655 x 375)#
38bec052391PNG(73 x 18)#
398ebc198918PNG(655 x 375)#
3c982d396PNG(73 x 18)#
3c9dab202708PNG(655 x 375)#
3fb5ea396PNG(73 x 18)#
3fb84c208305PNG(655 x 375)#
42e65e389PNG(73 x 18)#
42ea9a133849PNG(655 x 375)#
44f5cb2578PNG(128 x 49)#
4500333202GIF(16 x 16)#
450dbf202445PNG(655 x 375)#
4824f6396PNG(73 x 18)#
48290e225207PNG(655 x 375)#
4b9927389PNG(73 x 18)#
4ba0be188164PNG(655 x 375)#
4e802d52391PNG(73 x 18)#
4f50c6190370PNG(655 x 375)#
5238d3369PNG(73 x 18)#
523b1a197129PNG(655 x 375)#
553d8452391PNG(73 x 18)#
560ce2123190PNG(655 x 375)#
57ee6e3202GIF(16 x 16)#
57fbfa190863PNG(655 x 375)#
5ae5f3369PNG(73 x 18)#
5ae9f0214564PNG(655 x 375)#
5e307652391PNG(73 x 18)#
5f0322199071PNG(684 x 392)#
620d2c1364PNG(82 x 17)#
621358136479PNG(684 x 392)#
6428cf2619GIF(215 x 44)#
6433c9219424PNG(684 x 392)#
678d541289PNG(61 x 17)#
6792df1226PNG(58 x 17)#
679b1d229644PNG(684 x 392)#
6b1c941289PNG(61 x 17)#
6b22e81226PNG(58 x 17)#
6b2c31136479PNG(684 x 392)#
6d42d52619GIF(215 x 44)#
6d4dc2141315PNG(684 x 392)#
6f76ed777PNG(58 x 20)#
6f7b24870PNG(78 x 20)#
6f8032199071PNG(684 x 392)#
728a3c866PNG(82 x 20)#
728e63183432PNG(684 x 392)#
755c81777PNG(58 x 20)#
75600a870PNG(78 x 20)#
756a34199853PNG(655 x 375)#
78797f51778PNG(70 x 15)#
79458054276PNG(655 x 375)#
7a19ef51778PNG(70 x 15)#
7ae507208090PNG(655 x 375)#
7e134051778PNG(70 x 15)#
7edf3b107182PNG(655 x 375)#
8082412578PNG(128 x 49)#
808ca93202GIF(16 x 16)#
809a35201747PNG(655 x 375)#
83aeb251778PNG(70 x 15)#
847b80225631PNG(655 x 375)#
87ed4151778PNG(70 x 15)#
88b7833197BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK